Version 0.3

explorer
 taskbar

Makefile

@@ -1,4 +1,7 @@
-.PHONY: build
+.PHONY: clean build
 
 build:
 	7z a -pmalte -mhe=on "lite.apbx" ./src/*
+
+clean:
+	rm lite.apbx

README.md

@@ -0,0 +1,4 @@
+# Windows 10 lite playbook
+
+1. Download runner - https://download.ameliorated.io/AME%20Wizard%20Beta.zip
+1. Download playbook - https://git.grondek.pl/pgrondek/Win10Lite/releases

src/Configuration/custom.yml

@@ -4,8 +4,15 @@ description: Custom lite configration
 privilege: Admin
 actions: []
 features:
-  - features\lite\dark-mode.yml
   - features\lite\one-drive.yml
   - features\lite\default-apps.yml
   - features\lite\privacy.yml
   - features\lite\search.yml
+  - features\lite\scheduled-tasks.yml
+  - features\lite\improvements.yml
+  - features\lite\services.yml
+  - features\personalization\dark-mode.yml
+  - features\personalization\explorer.yml
+  - features\personalization\taskbar.yml
+  - features\personalization\context-menu.yml
+  - features\personalization\packages.yml

src/Configuration/features/lite/default-apps.yml

@@ -122,3 +122,25 @@ actions:
     value: 'DisableWindowsConsumerFeatures'
     data: '1'
     type: REG_DWORD
+
+  # Disable pre-installed applications
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
+    value: 'OemPreInstalledAppsEnabled'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
+    value: 'PreInstalledAppsEnabled'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
+    value: 'PreInstalledAppsEverEnabled'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
+    value: 'SilentInstalledAppsEnabled'
+    data: '0'
+    type: REG_DWORD

src/Configuration/features/lite/improvements.yml

@@ -0,0 +1,144 @@
+---
+title: General Improvements
+description: Some general improvements
+privilege: TrustedInstaller
+actions:
+  # Disable startup delay of running applications
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Serialize'
+    value: 'StartupDelayInMSec'
+    data: '0'
+    type: REG_DWORD
+
+  # Automatically close any applications and continue to restart, shut down, or sign out of Windows
+  - !registryValue:
+    path: 'HKCU\Control Panel\Desktop'
+    value: 'AutoEndTasks'
+    data: '1'
+    type: REG_SZ
+
+    # Decrease shutdown time
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control'
+    value: 'WaitToKillServiceTimeout'
+    data: '2000'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control'
+    value: 'HungAppTimeout'
+    data: '2000'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control'
+    value: 'AutoEndTasks'
+    data: '1'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCU\Control Panel\Desktop'
+    value: 'WaitToKillAppTimeOut'
+    data: '2000'
+    type: REG_SZ
+
+  # Disable auto download of Microsoft Store applications
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\WindowsStore'
+    value: 'AutoDownload'
+    data: '2'
+    type: REG_DWORD
+
+  # Disable website access to language list
+  - !registryValue:
+    path: 'HKCU\Control Panel\International\User Profile'
+    value: 'HttpAcceptLanguageOptOut'
+    data: '1'
+    type: REG_DWORD
+
+  # Disable speech model updates
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Speech'
+    value: 'AllowSpeechModelUpdate'
+    data: '0'
+    type: REG_DWORD
+
+  # Disable online speech recognition
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization'
+    value: 'AllowInputPersonalization'
+    data: '0'
+    type: REG_DWORD
+
+  # Disable activity feed
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System'
+    value: 'EnableActivityFeed'
+    data: '0'
+    type: REG_DWORD
+
+  # Disable cloud optimized content
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent'
+    value: 'DisableCloudOptimizedContent'
+    data: '1'
+    type: REG_DWORD
+
+  # Disable suggest ways I can finish setting up my device
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\UserProfileEngagement'
+    value: 'ScoobeSystemSettingEnabled'
+    data: '0'
+    type: REG_DWORD
+
+  # Disable automatic maintenance
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance'
+    value: 'MaintenanceDisabled'
+    data: '1'
+    type: REG_DWORD
+
+  # Disable scheduled system maintenance
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\ScheduledDiagnostics'
+    value: 'EnabledExecution'
+    data: '0'
+    type: REG_DWORD
+
+    # Disable SmartScreen for Microsoft Store applications
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost'
+    value: 'EnableWebContentEvaluation'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost'
+    value: 'PreventOverride'
+    data: '0'
+    type: REG_DWORD
+
+    # Disable SmartScreen for applications and files from web
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System'
+    value: 'EnableSmartScreen'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer'
+    value: 'SmartScreenEnabled'
+    data: 'Off'
+    type: REG_SZ
+
+  # Disable Windows Update automatic restart
+  - !registryValue:
+    path: 'HKLM\Software\Microsoft\WindowsUpdate\UX\Settings'
+    value: 'UxOption'
+    data: '1'
+    type: REG_DWORD
+
+  - !writeStatus: {status: "Cleaning up the WinSxS folder"}
+  - !cmd:
+    command: 'DISM /Online /Cleanup-Image /StartComponentCleanup'
+    weight: 30
+
+  # Uninstall Work Folders Client
+  - !cmd:
+    command: 'dism /online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart'
+    weight: 30

src/Configuration/features/lite/one-drive.yml

@@ -6,6 +6,12 @@ actions:
   # ---------- OneDrive
   - !writeStatus: { status: 'Disable OneDrive' }
 
+  - !systemPackage: {name: 'Microsoft-Windows-OneDrive-Setup-Deployment-LanguagePack', arch: amd64, language: 'en-US'}
+  - !systemPackage: {name: 'Microsoft-Windows-OneDrive-Setup-Deployment', arch: amd64, language: 'neutral'}
+  - !systemPackage: {name: 'Microsoft-Windows-OneDrive-Setup-WOW64-Deployment-LanguagePack', arch: amd64, language: 'en-US'}
+  - !systemPackage: {name: 'Microsoft-Windows-OneDrive-Setup-WOW64-Deployment', arch: amd64, language: 'neutral'}
+  - !systemPackage: {name: 'Microsoft-Windows-SystemSettings-SettingsHandlers-OneDriveBackup', arch: amd64, language: 'neutral'}
+
   - !registryValue:
     path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive'
     value: 'DisableFileSyncNGSC'

src/Configuration/features/lite/privacy.yml

@@ -3,6 +3,8 @@ title: Privacy settings
 description: Enable more privacy
 privilege: TrustedInstaller
 actions:
+  - !writeStatus: { status: 'Improving privacy' }
+
   - !registryValue:
     path: 'HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\DataCollection'
     value: 'AllowTelemetry'
@@ -128,8 +130,380 @@ actions:
     data: '0'
     type: REG_DWORD
   # Disable Windows Error Reporting
+  # https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsErrorReporting::WerDisable_2
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting'
+    value: 'DoReport'
+    data: '0'
+    type: REG_DWORD
   - !registryValue:
     path: 'HKLM\SOFTWARE\Microsoft\Windows\Windows Error Reporting'
     value: 'Disabled'
     data: '1'
     type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting'
+    value: 'Disabled'
+    data: '1'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting'
+    value: 'Disabled'
+    data: '1'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting'
+    value: 'AutoApproveOSDumps'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting'
+    value: 'DontSendAdditionalData'
+    data: '1'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting'
+    value: 'DontShowUI'
+    data: '1'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting'
+    value: 'LoggingDisabled'
+    data: '1'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent'
+    value: 'DefaultConsent'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent'
+    value: 'DefaultOverrideBehavior'
+    data: '1'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent'
+    value: '0'
+    data: ''
+    type: REG_SZ
+  # Disable PowerShell telemetry
+  # https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_telemetry?view=powershell-7.3
+  - !cmd: {command: 'setx DOTNET_CLI_TELEMETRY_OPTOUT 1'}
+  - !cmd: {command: 'setx POWERSHELL_TELEMETRY_OPTOUT 1'}
+
+    # Disable unnecessary autologgers
+  # https://docs.microsoft.com/en-us/windows/win32/etw/configuring-and-starting-an-autologger-session
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\Circular Kernel Context Logger'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\CloudExperienceHostOobe'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\DefenderApiLogger'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\DefenderAuditLogger'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\Diagtrack-Listener'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\Diaglog'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\LwtNetLog'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\NetCore'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\NtfsLog'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\RadioMgr'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\RdrLog'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\ReadyBoot'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\SpoolerLogger'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\UBPM'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\WdiContextLog'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\WiFiSession'
+    value: 'Start'
+    data: '0'
+    type: REG_DWORD
+
+    # Disable Windows Customer Experience Improvement Program (CEIP)
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\AppV\CEIP'
+    value: 'CEIPEnable'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\SQMClient\Windows'
+    value: 'CEIPEnable'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\SQMClient\Windows'
+    value: 'CEIPEnable'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Wow6432Node\Microsoft\VSCommon\15.0\SQM'
+    value: 'OptIn'
+    data: '0'
+    type: REG_DWORD
+
+
+    # Disable text/ink/handwriting telemetry
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\InputPersonalization'
+    value: 'RestrictImplicitInkCollection'
+    data: '1'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\InputPersonalization'
+    value: 'RestrictImplicitTextCollection'
+    data: '1'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore'
+    value: 'HarvestContacts'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Personalization\Settings'
+    value: 'AcceptedPrivacyPolicy'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\TabletPC'
+    value: 'PreventHandwritingDataSharing'
+    data: '1'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\HandwritingErrorReports'
+    value: 'PreventHandwritingErrorReports'
+    data: '1'
+    type: REG_DWORD
+
+    # Disable spell checking
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7'
+    value: 'EnableSpellchecking'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7'
+    value: 'EnableTextPrediction'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7'
+    value: 'EnablePredictionSpaceInsertion'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7'
+    value: 'EnableDoubleTapSpace'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7'
+    value: 'EnableAutocorrection'
+    data: '0'
+    type: REG_DWORD
+
+    # Disable typing insights
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Input\Settings'
+    value: 'InsightsEnabled'
+    data: '0'
+    type: REG_DWORD
+
+  # Configure app permissions/privacy section in Immersive Control Panel
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appointments'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\broadFileSystemAccess'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\chat'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\documentsLibrary'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCall'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCallHistory'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\picturesLibrary'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\radios'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userDataTasks'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userNotificationListener'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\videosLibrary'
+    value: 'Value'
+    data: 'Deny'
+    type: REG_SZ
+
+    # Do not allow upload and publish of user activities
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System'
+    value: 'UploadUserActivities'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System'
+    value: 'PublishUserActivities'
+    data: '0'
+    type: REG_DWORD
+
+
+
+    # Disable Performance Track (PerfTrack)
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}'
+    value: 'ScenarioExecutionEnabled'
+    data: '0'
+    type: REG_DWORD
+
+    # Disable advertising info
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo'
+    value: 'Enabled'
+    data: '0'
+    type: REG_DWORD
+
+    # Disable license telemetry
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform'
+    value: 'NoGenTicket'
+    data: '1'
+    type: REG_DWORD
+
+    # Disable Windows Feedback
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Siuf\Rules'
+    value: 'NumberOfSIUFInPeriod'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Siuf\Rules'
+    value: 'PeriodInNanoSeconds'
+    operation: delete
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection'
+    value: 'DoNotShowFeedbackNotifications'
+    data: '1'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection'
+    value: 'DoNotShowFeedbackNotifications'
+    data: '1'
+    type: REG_DWORD
+
+  - !service: {name: 'DiagTrack', operation: delete}

src/Configuration/features/lite/scheduled-tasks.yml

@@ -0,0 +1,68 @@
+---
+title: Scheduled tasks
+description: Delete sheduled tasks
+privilege: TrustedInstaller
+actions:
+  - !writeStatus: {status: 'Removing scheduled tasks'}
+
+  - !scheduledTask:
+    path: '\Microsoft\Windows\.NET Framework'
+    operation: deleteFolder
+  - !scheduledTask:
+    path: '\Microsoft\Windows\DeviceDirectoryClient'
+    operation: deleteFolder
+  - !scheduledTask:
+    path: '\Microsoft\Windows\Maps'
+    operation: deleteFolder
+  - !scheduledTask:
+    path: '\Microsoft\Windows\Speech'
+    operation: deleteFolder
+  - !scheduledTask:
+    path: '\Microsoft\Windows\UpdateOrchestrator'
+    operation: deleteFolder
+  - !scheduledTask:
+    path: '\Microsoft\Windows\Windows Defender'
+    operation: deleteFolder
+
+  - !scheduledTask: {path: '\Microsoft\Windows\AppID\EDP Policy Manager', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\ApplicationData\appuriverifierdaily', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\ApplicationData\appuriverifierinstall', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\ApplicationData\DsSvcCleanup', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Application Experience\PcaPatchDbTask', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Application Experience\ProgramDataUpdater', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Application Experience\StartupAppTask', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\CloudExperienceHost\CreateObjectTask', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Defrag\ScheduledDefrag', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Device Information\Device', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Device Setup\Metadata Refresh', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Diagnosis\Scheduled', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\DiskCleanup\SilentCleanup', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\DiskFootprint\Diagnostics', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\InstallService\ScanForUpdates', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\InstallService\ScanForUpdatesAsUser', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\InstallService\SmartRetry', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Management\Provisioning\Cellular', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\MUI\LPRemove', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\PI\Sqm-Tasks', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Printing\EduPrintProv', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\PushToInstall\LoginCheck', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Ras\MobilityManager', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Registry\RegIdleBackup', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\RetailDemo\CleanupOfflineContent', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Shell\IndexerAutomaticMaintenance', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\StateRepository\MaintenanceTasks', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Time Synchronization\SynchronizeTime', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Time Zone\SynchronizeTimeZone', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\UPnP\UPnPHostConfig', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\WaaSMedic\PerformRemediation', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Windows Error Reporting\QueueReporting', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\WindowsUpdate\Scheduled Start', operation: delete}
+  - !scheduledTask: {path: '\Microsoft\Windows\Wininet\CacheTask', operation: delete}

src/Configuration/features/lite/search.yml

@@ -3,20 +3,47 @@ title: Search settings
 description: Settings for better search
 privilege: TrustedInstaller
 actions:
-  - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'DisableWebSearch', type: REG_DWORD, data: '1' }
+  # Configure search settings
-  - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'ConnectedSearchUseWeb', type: REG_DWORD, data: '0' }
+  - !registryValue:
-  - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowIndexingEncryptedStoresOrItems', type: REG_DWORD, data: '0' }
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search'
-  - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowSearchToUseLocation', type: REG_DWORD, data: '0' }
+    value: 'ConnectedSearchUseWeb'
-  - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AlwaysUseAutoLangDetection', type: REG_DWORD, data: '0' }
+    data: '0'
-  - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowCortana', type: REG_DWORD, data: '0' }
+    type: REG_DWORD
-  - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'DisableWebSearch', type: REG_DWORD, data: '1' }
+  - !registryValue:
-  - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'ConnectedSearchUseWeb', type: REG_DWORD, data: '0' }
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search'
-  - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'ConnectedSearchUseWebOverMeteredConnections', type: REG_DWORD, data: '0' }
+    value: 'DisableWebSearch'
-  - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowCloudSearch', type: REG_DWORD, data: '0' }
+    data: '1'
-  - !registryValue: { path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'VoiceActivationDefaultOn', type: REG_DWORD, data: '0' }
+    type: REG_DWORD
-  - !registryValue: { path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'VoiceActivationEnableAboveLockscreen', type: REG_DWORD, data: '0' }
+  - !registryValue:
-  - !registryValue: { path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', type: REG_DWORD, data: '0' }
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search'
-  - !registryValue: { path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'DisableVoice', type: REG_DWORD, data: '1' }
+    value: 'AllowCloudSearch'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search'
+    value: 'BingSearchEnabled'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\SearchSettings'
+    value: 'IsAADCloudSearchEnabled'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\SearchSettings'
+    value: 'IsMSACloudSearchEnabled'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\SearchSettings'
+    value: 'IsDeviceSearchHistoryEnabled'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\SearchSettings'
+    value: 'SafeSearchMode'
+    data: '0'
+    type: REG_DWORD
 
   # Firewall rules to prevent the startmenu from talking
   - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules', value: 'Block Search SearchApp.exe', type: REG_SZ, data: 'v2.30|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe|Name=Block Search SearchUI.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|'}

src/Configuration/features/lite/services.yml

@@ -0,0 +1,48 @@
+---
+title: Services
+description: Configures services
+privilege: TrustedInstaller
+actions:
+  - !writeStatus: {status: 'Configuring services'}
+
+  # Stop and disable Diagnostics Tracking Service
+  - !service: {name: 'DiagTrack', operation: stop}
+  - !service: {name: 'DiagTrack', startup: 4}
+  # Microsoft (R) Diagnostics Hub Standard Collector Service
+  - !service: {name: 'diagnosticshub.standardcollector.service', operation: stop}
+  - !service: {name: 'diagnosticshub.standardcollector.service', startup: 4}
+  # WAP Push Message Routing Service
+  - !service: {name: 'dmwappushservice', operation: stop}
+  - !service: {name: 'dmwappushservice', startup: 4}
+  # Geolocation Service
+  - !service: {name: 'lfsvc', operation: stop}
+  - !service: {name: 'lfsvc', startup: 4}
+  # Downloaded Maps Manager
+  - !service: {name: 'MapsBroker', operation: stop}
+  - !service: {name: 'MapsBroker', startup: 4}
+  # Net.Tcp Port Sharing Service
+  - !service: {name: 'NetTcpPortSharing', operation: stop}
+  - !service: {name: 'NetTcpPortSharing', startup: 4}
+  # Routing and Remote Access
+  - !service: {name: 'RemoteAccess', operation: stop}
+  - !service: {name: 'RemoteAccess', startup: 4}
+  # Internet Connection Sharing (ICS)
+  - !service: {name: 'SharedAccess', operation: stop}
+  - !service: {name: 'SharedAccess', startup: 4}
+  # Distributed Link Tracking Client
+  - !service: {name: 'TrkWks', operation: stop}
+  - !service: {name: 'TrkWks', startup: 4}
+  # Windows Biometric Service (required for Fingerprint reader / facial detection)
+  - !service: {name: 'WbioSrvc', operation: stop}
+  - !service: {name: 'WbioSrvc', startup: 4}
+  # Windows Media Player Network Sharing Service
+  - !service: {name: 'WMPNetworkSvc', operation: stop}
+  - !service: {name: 'WMPNetworkSvc', startup: 4}
+  # Windows Network Data Usage Monitor
+  - !service: {name: 'ndu', operation: stop}
+  - !service: {name: 'ndu', startup: 4}
+  # Stop and disable Home Groups services
+  - !service: {name: 'HomeGroupListener', operation: stop}
+  - !service: {name: 'HomeGroupListener', startup: 4}
+  - !service: {name: 'HomeGroupProvider', operation: stop}
+  - !service: {name: 'HomeGroupProvider', startup: 4}

src/Configuration/features/personalization/context-menu.yml

@@ -0,0 +1,169 @@
+---
+title: Context menu
+description: Context menu customization
+privilege: TrustedInstaller
+actions:
+  - !writeStatus: { status: 'Personalize context menu' }
+
+  # Remove 'Give access to' from context menu
+  - !registryKey: {path: 'HKCR\*\shellex\ContextMenuHandlers\Sharing'}
+  - !registryKey: {path: 'HKCR\Directory\Background\shellex\ContextMenuHandlers\Sharing'}
+  - !registryKey: {path: 'HKCR\Directory\shellex\ContextMenuHandlers\Sharing'}
+  - !registryKey: {path: 'HKCR\Drive\shellex\ContextMenuHandlers\Sharing'}
+  - !registryKey: {path: 'HKCR\LibraryFolder\background\shellex\ContextMenuHandlers\Sharing'}
+  - !registryKey: {path: 'HKCR\UserLibraryFolder\shellex\ContextMenuHandlers\Sharing'}
+
+  # Remove 'Cast to device' from context menu
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked'
+    value: '{7AD84985-87B4-4a16-BE58-8B72A5B390F7}'
+    data: ''
+    type: REG_SZ
+
+    # Remove 'Share' from context menu
+  - !registryKey: {path: 'HKCR\*\shellex\ContextMenuHandlers\ModernSharing'}
+
+  # Remove bitmap image from the 'New' context menu
+  - !registryKey: {path: 'HKCR\.bmp\ShellNew'}
+
+  # Remove rich text document from 'New' context menu
+  - !registryKey: {path: 'HKCR\.rtf\ShellNew'}
+
+  # Remove 'Include in library' from context menu
+  - !registryKey: {path: 'HKCR\Folder\ShellEx\ContextMenuHandlers\Library Location'}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\Library Location'}
+
+  # Remove 'Troubleshooting compatibility' from context menu
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked'
+    value: '{1d27f844-3a1f-4410-85ac-14651078412d}'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked'
+    value: '{1d27f844-3a1f-4410-85ac-14651078412d}'
+    data: ''
+    type: REG_SZ
+
+    # Remove '- Shortcut' text added onto shortcuts
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer'
+    value: 'link'
+    data: '00000000'
+    type: REG_BINARY
+
+    # Remove 'Print' from context menu
+  - !registryValue:
+    path: 'HKCR\SystemFileAssociations\image\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\batfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\cmdfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\docxfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\fonfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\htmlfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\inffile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\inifile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\JSEFile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\otffile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\pfmfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\regfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\rtffile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\ttcfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\ttffile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\txtfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\VBEFile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\VBSFile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\WSFFile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+
+    # Add 'Install CAB' to context menu
+  - !registryKey: {path: 'HKCR\CABFolder\Shell\RunAs'}
+  - !registryValue:
+    path: 'HKCR\CABFolder\Shell\RunAs'
+    value: ''
+    data: 'Install'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\CABFolder\Shell\RunAs'
+    value: 'HasLUAShield'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\CABFolder\Shell\RunAs\Command'
+    value: ''
+    data: 'cmd /k DISM /online /add-package /packagepath:\"%1\"'
+    type: REG_SZ
+

src/Configuration/features/personalization/explorer.yml

@@ -0,0 +1,60 @@
+---
+title: Windows explorer
+description: Explorer customization
+privilege: TrustedInstaller
+actions:
+  - !writeStatus: { status: 'Personalize explorer' }
+
+  # Show file extensions in File Explorer
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced'
+    value: 'HideFileExt'
+    data: '0'
+    type: REG_DWORD
+
+  # Disable show thumbnails instead of icons
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced'
+    value: 'IconsOnly'
+    data: '1'
+    type: REG_DWORD
+
+  # Disable sharing wizard
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced'
+    value: 'SharingWizardOn'
+    data: '0'
+    type: REG_DWORD
+
+  # Show more details in file transfer dialog
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager'
+    value: 'EnthusiastMode'
+    data: '1'
+    type: REG_DWORD
+
+  # Disable Windows Spotlight features
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Policies\Microsoft\Windows\CloudContent'
+    value: 'DisableWindowsSpotlightFeatures'
+    data: '1'
+    type: REG_DWORD
+
+    # Do not suggest third-party content in Windows Spotlight
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Policies\Microsoft\Windows\CloudContent'
+    value: 'DisableThirdPartySuggestions'
+    data: '1'
+    type: REG_DWORD
+
+  # Do not use diagnostic data for tailored experiences
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Privacy'
+    value: 'TailoredExperiencesWithDiagnosticDataEnabled'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Policies\Microsoft\Windows\CloudContent'
+    value: 'DisableTailoredExperiencesWithDiagnosticData'
+    data: '1'
+    type: REG_DWORD

src/Configuration/features/personalization/packages.yml

@@ -0,0 +1,19 @@
+---
+title: Packages
+description: Install packages
+privilege: TrustedInstaller
+actions:
+  - !writeStatus: { status: 'Installing Chocolatey' }
+  - !powerShell:
+    command: 'Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object System.Net.WebClient).DownloadString(''https://community.chocolatey.org/install.ps1''))'
+    weight: 30
+
+  - !writeStatus: { status: 'Installing Firefox' }
+  - !cmd:
+    command: '"%ProgramData%\chocolatey\bin\choco.exe" install -y --force --allow-empty-checksums firefox'
+    weight: 150
+
+  - !writeStatus: { status: 'Installing steam' }
+  - !cmd:
+    command: '"%ProgramData%\chocolatey\bin\choco.exe" install -y --force --allow-empty-checksums steam'
+    weight: 150

src/Configuration/features/personalization/taskbar.yml

@@ -0,0 +1,59 @@
+---
+title: Taskbar
+description: Settings for taskbar personalization
+privilege: TrustedInstaller
+actions:
+  - !writeStatus: { status: 'Personalize taskbar' }
+
+  # Set search as icon on taskbar
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search'
+    value: 'SearchboxTaskbarMode'
+    data: '1'
+    type: REG_DWORD
+
+  # Reduce menu show delay time
+  - !registryValue:
+    path: 'HKCU\Control Panel\Desktop'
+    value: 'MenuShowDelay'
+    data: '0'
+    type: REG_SZ
+
+  # Do not allow pinning Microsoft Store app to taskbar
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Policies\Microsoft\Windows\Explorer'
+    value: 'NoPinningStoreToTaskbar'
+    data: '1'
+    type: REG_DWORD
+
+  # Hide meet now button on taskbar
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer'
+    value: 'HideSCAMeetNow'
+    data: '1'
+    type: REG_DWORD
+
+  # Hide task view button on taskbar
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MultiTaskingView\AllUpView'
+    value: 'Enabled'
+    operation: delete
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced'
+    value: 'ShowTaskViewButton'
+    data: '0'
+    type: REG_DWORD
+
+  # Disable news and interests on taskbar
+  # Explorer immediately reset ShellFeedsTaskbarViewMode otherwise
+  - !taskKill:
+    name: 'explorer'
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds'
+    value: 'ShellFeedsTaskbarViewMode'
+    data: '2'
+    type: REG_DWORD
+    operation: add
+  - !run:
+    exe: 'explorer.exe'
+    wait: false

src/playbook.conf

@@ -6,19 +6,17 @@
 	<ShortDescription>Win10 Lite Playbook for Windows 10 22H2</ShortDescription>
 	<Description></Description>
 	<Details>Win10Lite</Details>
-	<Version>0.1</Version>
+	<Version>0.3</Version>
 	<SupportedBuilds>
 		<string>19045</string>
 	</SupportedBuilds>
 	<Requirements>
-		<Requirement>Activation</Requirement>
 		<Requirement>DefenderDisabled</Requirement>
 		<Requirement>Internet</Requirement>
 		<Requirement>NoAntivirus</Requirement>
 		<Requirement>NoPendingUpdates</Requirement>
 		<Requirement>PluggedIn</Requirement>
 	</Requirements>
-	<ProductCode>64</ProductCode>
 	<EstimatedMinutes>30</EstimatedMinutes>
 	<Git>https://git.grondek.pl/pgrondek/Win10Lite</Git>
 </Playbook>